cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 09/12/2015 16:53:35 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\julien\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

7,96 Gb Total Physical Memory | 5,90 Gb Available Physical Memory | 74,12% Memory free
9,21 Gb Paging File | 7,15 Gb Available in Paging File | 77,66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,67 Gb Total Space | 15,44 Gb Free Space | 26,32% Space Free | Partition Type: NTFS
Drive D: | 1364,97 Gb Total Space | 1234,22 Gb Free Space | 90,42% Space Free | Partition Type: NTFS
Drive F: | 488,28 Gb Total Space | 488,09 Gb Free Space | 99,96% Space Free | Partition Type: NTFS

Computer Name: PCJULIEN | User Name: julien | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found --
PRC - [2015/12/09 16:49:52 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\julien\Desktop\OTL.exe
PRC - [2015/11/28 17:59:28 | 000,554,288 | ---- | M] () -- C:\Users\julien\AppData\Roaming\cacaoweb\cacaoweb.exe
PRC - [2015/11/27 17:19:30 | 001,595,864 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe
PRC - [2015/11/24 09:00:56 | 000,741,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015/11/12 11:51:06 | 005,565,448 | ---- | M] (LogMeIn Inc.) -- D:\Hamachi\hamachi-2-ui.exe
PRC - [2015/11/10 03:44:38 | 003,011,152 | ---- | M] (Valve Corporation) -- D:\Steam\Steam.exe
PRC - [2015/11/10 03:44:38 | 001,939,536 | ---- | M] (Valve Corporation) -- D:\Steam\bin\steamwebhelper.exe
PRC - [2015/11/10 03:44:38 | 000,836,176 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2015/11/09 17:48:33 | 000,857,288 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender Agent\ProductAgentService.exe
PRC - [2015/11/04 15:07:19 | 000,548,552 | ---- | M] (Microsoft Corporation) -- C:\Users\julien\AppData\Local\Microsoft\OneDrive\OneDrive.exe
PRC - [2013/09/05 01:46:00 | 001,364,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013/08/29 17:27:28 | 000,414,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/11/28 17:59:28 | 000,554,288 | ---- | M] () -- C:\Users\julien\AppData\Roaming\cacaoweb\cacaoweb.exe
MOD - [2015/11/24 09:00:53 | 001,583,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libglesv2.dll
MOD - [2015/11/24 09:00:52 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libegl.dll
MOD - [2015/11/10 03:44:42 | 002,541,648 | ---- | M] () -- D:\Steam\video.dll
MOD - [2015/11/10 03:44:38 | 000,806,992 | ---- | M] () -- D:\Steam\bin\chromehtml.dll
MOD - [2015/11/03 23:00:12 | 000,201,728 | ---- | M] () -- D:\Steam\bin\openvr_api.dll
MOD - [2015/10/08 23:20:18 | 045,010,208 | ---- | M] () -- D:\Steam\bin\libcef.dll
MOD - [2015/10/05 17:18:14 | 000,778,752 | ---- | M] () -- D:\Steam\SDL2.dll
MOD - [2015/09/24 01:33:18 | 002,549,248 | ---- | M] () -- D:\Steam\libavcodec-56.dll
MOD - [2015/09/24 01:33:18 | 000,491,008 | ---- | M] () -- D:\Steam\libavformat-56.dll
MOD - [2015/09/24 01:33:18 | 000,485,888 | ---- | M] () -- D:\Steam\libswscale-3.dll
MOD - [2015/09/24 01:33:18 | 000,442,880 | ---- | M] () -- D:\Steam\libavutil-54.dll
MOD - [2015/09/24 01:33:18 | 000,332,800 | ---- | M] () -- D:\Steam\libavresample-2.dll
MOD - [2015/07/03 17:12:46 | 004,962,816 | ---- | M] () -- D:\Steam\v8.dll
MOD - [2015/07/03 17:12:28 | 001,556,992 | ---- | M] () -- D:\Steam\icui18n.dll
MOD - [2015/07/03 17:12:28 | 001,187,840 | ---- | M] () -- D:\Steam\icuuc.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2015/11/27 17:19:30 | 001,595,864 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe -- (VSSERV)
SRV:[b]64bit:[/b] - [2015/11/09 17:48:33 | 000,857,288 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender Agent\ProductAgentService.exe -- (ProductAgentService)
SRV:[b]64bit:[/b] - [2015/11/05 05:03:52 | 002,180,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2015/11/05 05:03:49 | 001,015,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:[b]64bit:[/b] - [2015/11/05 05:01:38 | 000,713,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:[b]64bit:[/b] - [2015/11/05 04:59:13 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:[b]64bit:[/b] - [2015/11/05 04:55:55 | 000,145,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:38 | 001,844,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 002,093,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 001,423,872 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 001,205,248 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,809,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,591,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,526,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,513,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,503,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,378,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,288,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,267,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,149,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:[b]64bit:[/b] - [2015/09/29 15:49:34 | 000,124,488 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe -- (UPDATESRV)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:16 | 000,280,064 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:16 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 001,169,408 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 001,031,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 000,343,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 000,322,048 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 001,643,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,658,568 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,229,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:[b]64bit:[/b] - [2015/07/10 06:34:34 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2015/07/10 06:11:31 | 003,467,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2015/07/10 05:56:23 | 000,362,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2015/07/10 05:56:16 | 000,024,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2015/07/10 05:40:18 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 05:40:18 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 05:40:18 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 05:40:18 | 000,039,856 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 04:54:58 | 000,749,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2015/07/10 04:38:50 | 001,149,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:[b]64bit:[/b] - [2015/07/10 04:38:45 | 000,021,504 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:[b]64bit:[/b] - [2015/07/10 04:38:31 | 001,019,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:36:02 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:[b]64bit:[/b] - [2015/07/10 04:35:19 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:[b]64bit:[/b] - [2015/07/10 04:35:08 | 000,087,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:[b]64bit:[/b] - [2015/07/10 04:34:53 | 000,918,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:[b]64bit:[/b] - [2015/07/10 04:34:02 | 000,275,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:30:37 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:30:08 | 000,296,960 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:29:55 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:[b]64bit:[/b] - [2015/07/10 04:23:57 | 000,583,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:[b]64bit:[/b] - [2015/07/10 04:23:40 | 000,550,400 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2015/07/10 04:23:00 | 000,337,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2015/07/10 04:22:25 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:22:21 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2015/07/10 04:21:05 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:20:14 | 000,621,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2015/07/10 04:19:54 | 000,115,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2015/07/10 04:19:20 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/07/10 04:19:04 | 000,836,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:59 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:55 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:53 | 000,268,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:48 | 000,096,256 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:30 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:29 | 000,055,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2015/07/10 04:18:26 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2015/07/10 04:17:40 | 000,063,488 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:[b]64bit:[/b] - [2015/07/10 04:16:19 | 000,062,464 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 04:15:40 | 000,118,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:15:32 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:15:19 | 000,019,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2015/07/10 04:15:06 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:56 | 000,405,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:54 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:54 | 000,033,280 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:40 | 000,196,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2015/07/10 04:14:29 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV - [2015/12/09 16:36:12 | 000,269,504 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/11/12 11:51:04 | 002,546,184 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2015/11/10 03:44:38 | 000,836,176 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015/11/05 04:27:12 | 002,049,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2015/10/25 11:44:27 | 000,928,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
SRV - [2015/10/25 11:44:27 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2015/10/25 11:44:27 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2015/07/10 06:34:34 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2015/07/10 04:32:03 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\lfsvc.dll -- (lfsvc)
SRV - [2015/07/10 04:25:49 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2015/07/09 12:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/09/05 01:46:00 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013/08/29 17:27:28 | 000,414,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/11/27 17:20:24 | 000,087,920 | ---- | M] (BitDefender) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\bdvedisk.sys -- (BDVEDISK)
DRV:[b]64bit:[/b] - [2015/11/12 11:47:06 | 000,045,680 | ---- | M] (LogMeIn Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Hamdrv.sys -- (Hamachi)
DRV:[b]64bit:[/b] - [2015/11/04 15:09:14 | 000,282,000 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avchv.sys -- (avchv)
DRV:[b]64bit:[/b] - [2015/11/04 15:08:33 | 001,600,512 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avc3.sys -- (avc3)
DRV:[b]64bit:[/b] - [2015/11/04 15:08:30 | 000,775,424 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\avckf.sys -- (avckf)
DRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,516,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,278,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,099,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2015/10/25 11:44:27 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:[b]64bit:[/b] - [2015/09/10 06:26:25 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2015/09/10 06:26:06 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:16 | 000,052,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 000,934,752 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 000,685,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:10 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:09 | 000,200,528 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,373,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,080,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2015/09/10 06:11:03 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:[b]64bit:[/b] - [2015/07/10 06:10:58 | 000,119,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2015/07/10 06:10:39 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2015/07/10 06:10:03 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:33 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:24 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:24 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:24 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:24 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:24 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:24 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:23 | 000,291,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2015/07/10 06:09:12 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2015/07/10 06:08:22 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV:[b]64bit:[/b] - [2015/07/10 06:08:05 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2015/07/10 06:07:46 | 000,159,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2015/07/10 06:07:40 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2015/07/10 06:07:32 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2015/07/10 06:06:43 | 000,040,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:[b]64bit:[/b] - [2015/07/10 06:06:12 | 000,207,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2015/07/10 06:06:10 | 000,209,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:[b]64bit:[/b] - [2015/07/10 06:06:10 | 000,031,072 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2015/07/10 06:06:06 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2015/07/10 06:05:29 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2015/07/10 06:05:27 | 000,116,576 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2015/07/10 06:05:17 | 000,200,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2015/07/10 06:05:17 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2015/07/10 06:05:17 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2015/07/10 06:05:15 | 000,380,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2015/07/10 06:04:52 | 000,092,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2015/07/10 06:04:26 | 000,153,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:50 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:50 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:20 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:16 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:16 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:13 | 000,474,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:12 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:11 | 000,088,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:11 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2015/07/10 06:03:10 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2015/07/10 05:56:52 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2015/07/10 05:55:09 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2015/07/10 05:55:06 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2015/07/10 05:54:54 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:[b]64bit:[/b] - [2015/07/10 05:54:54 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:[b]64bit:[/b] - [2015/07/10 05:54:54 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:[b]64bit:[/b] - [2015/07/10 05:54:53 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:[b]64bit:[/b] - [2015/07/10 05:54:53 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:[b]64bit:[/b] - [2015/07/10 05:52:43 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 05:52:33 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 05:52:32 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 05:52:28 | 000,245,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:[b]64bit:[/b] - [2015/07/10 05:52:28 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 05:52:28 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:[b]64bit:[/b] - [2015/07/10 05:36:15 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/07/10 05:32:10 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:[b]64bit:[/b] - [2015/07/10 05:31:59 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:[b]64bit:[/b] - [2015/07/10 05:31:38 | 000,043,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2015/07/10 04:36:22 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:[b]64bit:[/b] - [2015/07/10 04:27:49 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:[b]64bit:[/b] - [2015/07/10 04:26:31 | 000,215,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/07/10 04:24:58 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2015/07/10 04:24:54 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2015/07/10 04:23:18 | 000,082,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2015/07/10 04:23:04 | 000,129,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2015/07/10 04:22:34 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2015/07/10 04:22:31 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:58 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:44 | 000,044,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:44 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:39 | 000,116,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:37 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:36 | 000,042,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:21 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:20 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2015/07/10 04:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2015/07/10 04:20:51 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2015/07/10 04:20:43 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2015/07/10 04:20:43 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2015/07/10 04:18:22 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2015/07/10 04:18:16 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2015/07/10 04:17:34 | 000,094,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2015/07/10 04:17:32 | 000,061,952 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:[b]64bit:[/b] - [2015/07/10 04:17:31 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2015/07/10 04:17:23 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2015/07/10 04:16:33 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2015/07/10 04:16:28 | 000,055,296 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2015/07/10 04:14:31 | 000,083,968 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:[b]64bit:[/b] - [2015/07/10 04:14:31 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2015/07/10 04:13:58 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2015/07/10 04:13:53 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2015/07/10 04:13:53 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2015/07/10 04:13:47 | 000,222,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:[b]64bit:[/b] - [2015/07/10 04:13:45 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:[b]64bit:[/b] - [2015/07/10 04:13:00 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:[b]64bit:[/b] - [2015/07/10 04:12:53 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2015/07/10 04:12:52 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ioqos.sys -- (IoQos)
DRV:[b]64bit:[/b] - [2015/06/18 02:04:39 | 000,122,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2015/06/18 02:04:11 | 002,512,016 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2015/06/18 02:04:11 | 000,587,264 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
DRV:[b]64bit:[/b] - [2015/06/18 02:04:00 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2015/06/18 02:03:50 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2015/06/02 14:21:15 | 000,477,272 | ---- | M] (BitDefender S.R.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\trufos.sys -- (trufos)
DRV:[b]64bit:[/b] - [2015/04/29 13:32:17 | 000,160,032 | ---- | M] (BitDefender LLC) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\gzflt.sys -- (gzflt)
DRV:[b]64bit:[/b] - [2015/04/16 19:03:30 | 000,195,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2013/09/08 19:04:56 | 000,023,568 | ---- | M] (Bitdefender) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bdelam.sys -- (bdelam)
DRV:[b]64bit:[/b] - [2013/07/29 15:45:27 | 000,107,008 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys -- (bdfwfpf)
DRV:[b]64bit:[/b] - [2012/10/26 15:42:22 | 004,758,176 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:[b]64bit:[/b] - [2012/10/26 15:42:22 | 000,351,520 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (lvrs64)
DRV:[b]64bit:[/b] - [2012/10/26 15:42:22 | 000,026,784 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvbflt64.sys -- (CompFilter64)
DRV:[b]64bit:[/b] - [2012/07/17 17:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV - [2015/07/10 06:08:22 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV - [2015/07/10 04:20:43 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV - [2010/07/01 18:11:24 | 000,012,352 | ---- | M] () [Kernel | Unavailable | Unknown] -- D:\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC




IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/fr-fr/?ocid=iehp
IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR
IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 20 F8 EA B2 84 09 D1 01 [binary data]
IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2515474790-4026213131-545787870-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm


[color=#E56717]========== FireFox ==========[/color]

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.66.2: C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.66.2: C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bdwteff@bitdefender.com: C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2016\BDWTEFF\ [2015/10/12 18:50:43 | 000,000,000 | ---D | M]
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2016\BDTBEXT [2015/10/12 18:49:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bdwteff@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff\ [2015/10/12 18:50:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015/10/12 18:49:47 | 000,000,000 | ---D | M]


[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhhejlifdlcgcmogbggeomfodgklfaem\20.0.2_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
CHR - Extension: No name found = C:\Users\julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2015/12/09 16:31:35 | 000,001,143 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Bitdefender Wallet ) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll (Bitdefender)
O2 - BHO: (Bitdefender Wallet) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll (Bitdefender)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Bitdefender Wallet ) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll (Bitdefender)
O3 - HKLM\..\Toolbar: (Bitdefender Wallet) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll (Bitdefender)
O4:[b]64bit:[/b] - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2515474790-4026213131-545787870-1001..\Run: [Bitdefender Agent Wallet] C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe (Bitdefender)
O4 - HKU\S-1-5-21-2515474790-4026213131-545787870-1001..\Run: [cacaoweb] C:\Users\julien\AppData\Roaming\cacaoweb\cacaoweb.exe ()
O4 - HKU\S-1-5-21-2515474790-4026213131-545787870-1001..\Run: [OneDrive] C:\Users\julien\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2515474790-4026213131-545787870-1001..\Run: [Steam] D:\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-2515474790-4026213131-545787870-1004..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2515474790-4026213131-545787870-1004..\RunOnce: [WAB Migrate] C:\Program Files (x86)\Windows Mail\wab.exe (Microsoft Corporation)
O4 - Startup: C:\Users\julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = D:\Rainmeter\Rainmeter.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2d44ef29-7696-47f3-a455-67010d310709}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{b83f3d4d-b1f4-45e4-bde4-3da21b254414}: DhcpNameServer = 192.168.0.254
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] dosvc - C:\Windows\SysNative\dosvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DcpSvc - C:\Windows\SysNative\dcpsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NetSetupSvc - C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dmwappushservice - C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblGameSave - C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxNetApiSvc - C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UsoSvc - C:\Windows\SysNative\usocore.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DmEnrollmentSvc - C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblAuthManager - C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] RetailDemo - C:\Windows\SysNative\RDXService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)


SafeBootMin:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: Hamachi2Svc - D:\Hamachi\hamachi-2.exe (LogMeIn Inc.)
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C49181C5-51A7-39B8-A058-B35C7BAD6E1F} - .NET Framework
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D3D70DDE-B3B4-33DE-A8CD-808A85D68682} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:[b]64bit:[/b] VIDC.FICV - ficvdec_x64.dll ()
Drivers32:[b]64bit:[/b] VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:[b]64bit:[/b] vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32:[b]64bit:[/b] vidc.tsc2 - C:\WINDOWS\SysWOW64\tsc2_codec64.dll (TechSmith Corporation)
Drivers32:[b]64bit:[/b] vidc.tscc - C:\WINDOWS\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FICV - C:\WINDOWS\SysWow64\ficvdec_x86.dll ()
Drivers32: VIDC.FPS1 - C:\WINDOWS\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\WINDOWS\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.tsc2 - C:\Windows\SysWOW64\tsc2_codec32.dll (TechSmith Corporation)
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/12/09 16:48:27 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\julien\Desktop\OTL.exe
[2015/12/09 16:44:54 | 001,720,310 | ---- | C] (Nephya ) -- C:\Users\julien\Desktop\Nephya (1).exe
[2015/12/09 16:35:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2015/12/09 16:35:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2015/12/09 16:02:52 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\NephyaDofus-2
[2015/12/09 15:47:34 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\NephyaDofus
[2015/12/09 15:47:34 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Nephya
[2015/12/09 15:47:34 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\app
[2015/12/06 15:24:03 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\LogMeIn
[2015/12/06 15:24:03 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn
[2015/12/06 14:51:39 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\LogMeIn Hamachi
[2015/12/06 14:51:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2015/12/05 18:06:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2015/12/05 18:06:02 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2015/12/05 18:06:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2015/12/05 18:06:02 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2015/12/05 18:06:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2015/12/05 18:05:22 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2015/12/05 18:05:22 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015/12/05 18:05:22 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2015/12/05 18:05:17 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2015/12/05 18:05:17 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015/12/05 18:05:17 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2015/12/05 18:02:58 | 000,000,000 | ---D | C] -- C:\Program Files\Echobit
[2015/12/05 18:02:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Echobit
[2015/12/05 18:02:41 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\Echobit
[2015/12/05 17:55:52 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\dvdcss
[2015/12/05 16:13:56 | 000,000,000 | ---D | C] -- C:\Users\julien\Desktop\music
[2015/12/05 15:41:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited
[2015/12/05 15:41:11 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Canneverbe Limited
[2015/12/05 14:38:08 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\Blizzard Entertainment
[2015/12/05 10:18:34 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2015/12/04 14:39:28 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Teeworlds
[2015/12/04 11:45:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2015/12/04 11:43:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firestorm Launcher
[2015/12/04 11:00:31 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Desktop
[2015/12/04 10:48:59 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\UplauncherEregor
[2015/12/04 10:46:46 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Elyn v0.5
[2015/12/04 10:23:05 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2015/12/04 10:23:05 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Reg
[2015/12/04 10:23:05 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Elyn
[2015/12/04 10:21:39 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\DofusTesting-2
[2015/12/03 18:26:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
[2015/12/03 18:26:39 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1995-08.com.techsmith
[2015/12/03 18:26:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2015/12/03 18:26:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\TechSmith Shared
[2015/12/03 18:08:41 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\TechSmith
[2015/12/03 18:08:37 | 000,000,000 | ---D | C] -- C:\Users\julien\Documents\Camtasia Studio
[2015/12/03 18:08:35 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\TechSmith
[2015/12/03 17:55:53 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
[2015/12/02 18:39:35 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2015/12/02 18:22:51 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Mirillis
[2015/12/02 18:22:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis
[2015/12/02 18:22:47 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\Mirillis
[2015/12/02 18:22:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
[2015/12/02 18:00:12 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
[2015/12/02 15:59:58 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_7.dll
[2015/12/02 15:59:58 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_7.dll
[2015/12/02 15:59:58 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_7.dll
[2015/12/02 15:59:58 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_7.dll
[2015/12/02 15:59:58 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_5.dll
[2015/12/02 15:59:58 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_5.dll
[2015/12/02 15:59:57 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_43.dll
[2015/12/02 15:59:57 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_43.dll
[2015/12/02 15:59:57 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_43.dll
[2015/12/02 15:59:57 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_43.dll
[2015/12/02 15:59:57 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_43.dll
[2015/12/02 15:59:57 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_43.dll
[2015/12/02 15:59:57 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_43.dll
[2015/12/02 15:59:57 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_43.dll
[2015/12/02 15:59:57 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_43.dll
[2015/12/02 15:59:57 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_43.dll
[2015/12/02 15:59:56 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_6.dll
[2015/12/02 15:59:56 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_6.dll
[2015/12/02 15:59:56 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_6.dll
[2015/12/02 15:59:56 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_6.dll
[2015/12/02 15:59:56 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_4.dll
[2015/12/02 15:59:56 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_4.dll
[2015/12/02 15:59:56 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_7.dll
[2015/12/02 15:59:56 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_7.dll
[2015/12/02 15:59:55 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_42.dll
[2015/12/02 15:59:55 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_42.dll
[2015/12/02 15:59:55 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_42.dll
[2015/12/02 15:59:55 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_42.dll
[2015/12/02 15:59:55 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_5.dll
[2015/12/02 15:59:55 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_5.dll
[2015/12/02 15:59:55 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_5.dll
[2015/12/02 15:59:55 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_5.dll
[2015/12/02 15:59:54 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_42.dll
[2015/12/02 15:59:54 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_41.dll
[2015/12/02 15:59:54 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_42.dll
[2015/12/02 15:59:54 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_41.dll
[2015/12/02 15:59:54 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_42.dll
[2015/12/02 15:59:54 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_41.dll
[2015/12/02 15:59:54 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_42.dll
[2015/12/02 15:59:54 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_41.dll
[2015/12/02 15:59:54 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_42.dll
[2015/12/02 15:59:54 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_42.dll
[2015/12/02 15:59:53 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_41.dll
[2015/12/02 15:59:53 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_41.dll
[2015/12/02 15:59:53 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_4.dll
[2015/12/02 15:59:53 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_4.dll
[2015/12/02 15:59:53 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_4.dll
[2015/12/02 15:59:53 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_4.dll
[2015/12/02 15:59:53 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_3.dll
[2015/12/02 15:59:53 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_3.dll
[2015/12/02 15:59:53 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_6.dll
[2015/12/02 15:59:53 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_6.dll
[2015/12/02 15:59:52 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_40.dll
[2015/12/02 15:59:52 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_40.dll
[2015/12/02 15:59:52 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_40.dll
[2015/12/02 15:59:52 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_40.dll
[2015/12/02 15:59:52 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_40.dll
[2015/12/02 15:59:52 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_3.dll
[2015/12/02 15:59:52 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_3.dll
[2015/12/02 15:59:52 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_40.dll
[2015/12/02 15:59:52 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_3.dll
[2015/12/02 15:59:52 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_3.dll
[2015/12/02 15:59:52 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_2.dll
[2015/12/02 15:59:52 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_2.dll
[2015/12/02 15:59:51 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_39.dll
[2015/12/02 15:59:51 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_39.dll
[2015/12/02 15:59:51 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_39.dll
[2015/12/02 15:59:51 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_2.dll
[2015/12/02 15:59:51 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_2.dll
[2015/12/02 15:59:51 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_39.dll
[2015/12/02 15:59:51 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_2.dll
[2015/12/02 15:59:51 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_2.dll
[2015/12/02 15:59:51 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_1.dll
[2015/12/02 15:59:51 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_1.dll
[2015/12/02 15:59:51 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_5.dll
[2015/12/02 15:59:51 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_5.dll
[2015/12/02 15:59:50 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_39.dll
[2015/12/02 15:59:50 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_39.dll
[2015/12/02 15:59:50 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_1.dll
[2015/12/02 15:59:50 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_1.dll
[2015/12/02 15:59:50 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_1.dll
[2015/12/02 15:59:50 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_1.dll
[2015/12/02 15:59:50 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_0.dll
[2015/12/02 15:59:50 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_0.dll
[2015/12/02 15:59:50 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_4.dll
[2015/12/02 15:59:50 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_4.dll
[2015/12/02 15:59:49 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_38.dll
[2015/12/02 15:59:49 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_38.dll
[2015/12/02 15:59:49 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_38.dll
[2015/12/02 15:59:49 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_38.dll
[2015/12/02 15:59:49 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_38.dll
[2015/12/02 15:59:49 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_0.dll
[2015/12/02 15:59:49 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_0.dll
[2015/12/02 15:59:49 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_38.dll
[2015/12/02 15:59:49 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_0.dll
[2015/12/02 15:59:49 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_0.dll
[2015/12/02 15:59:48 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_37.dll
[2015/12/02 15:59:48 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_37.dll
[2015/12/02 15:59:48 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_37.dll
[2015/12/02 15:59:48 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_37.dll
[2015/12/02 15:59:48 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_37.dll
[2015/12/02 15:59:48 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_37.dll
[2015/12/02 15:59:48 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_10.dll
[2015/12/02 15:59:48 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_10.dll
[2015/12/02 15:59:48 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_3.dll
[2015/12/02 15:59:48 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_3.dll
[2015/12/02 15:59:47 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_36.dll
[2015/12/02 15:59:47 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_36.dll
[2015/12/02 15:59:47 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_36.dll
[2015/12/02 15:59:47 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_36.dll
[2015/12/02 15:59:47 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_36.dll
[2015/12/02 15:59:47 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_36.dll
[2015/12/02 15:59:46 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_35.dll
[2015/12/02 15:59:46 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_35.dll
[2015/12/02 15:59:46 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_35.dll
[2015/12/02 15:59:46 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_34.dll
[2015/12/02 15:59:46 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_35.dll
[2015/12/02 15:59:46 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_34.dll
[2015/12/02 15:59:46 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_35.dll
[2015/12/02 15:59:46 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_34.dll
[2015/12/02 15:59:46 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_35.dll
[2015/12/02 15:59:46 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_34.dll
[2015/12/02 15:59:46 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_9.dll
[2015/12/02 15:59:46 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_8.dll
[2015/12/02 15:59:46 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_9.dll
[2015/12/02 15:59:46 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_8.dll
[2015/12/02 15:59:46 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_2.dll
[2015/12/02 15:59:46 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_2.dll
[2015/12/02 15:59:45 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_34.dll
[2015/12/02 15:59:45 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_34.dll
[2015/12/02 15:59:45 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_7.dll
[2015/12/02 15:59:45 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_7.dll
[2015/12/02 15:59:45 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_3.dll
[2015/12/02 15:59:45 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_3.dll
[2015/12/02 15:59:44 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_33.dll
[2015/12/02 15:59:44 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_33.dll
[2015/12/02 15:59:44 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_33.dll
[2015/12/02 15:59:44 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_33.dll
[2015/12/02 15:59:44 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_33.dll
[2015/12/02 15:59:44 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_33.dll
[2015/12/02 15:59:44 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_6.dll
[2015/12/02 15:59:44 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_6.dll
[2015/12/02 15:59:43 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_32.dll
[2015/12/02 15:59:43 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_31.dll
[2015/12/02 15:59:43 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_32.dll
[2015/12/02 15:59:43 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_31.dll
[2015/12/02 15:59:43 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10.dll
[2015/12/02 15:59:43 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10.dll
[2015/12/02 15:59:43 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_5.dll
[2015/12/02 15:59:43 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_4.dll
[2015/12/02 15:59:43 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_5.dll
[2015/12/02 15:59:43 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_4.dll
[2015/12/02 15:59:43 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_1.dll
[2015/12/02 15:59:43 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_1.dll
[2015/12/02 15:59:42 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_3.dll
[2015/12/02 15:59:42 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_2.dll
[2015/12/02 15:59:42 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_1.dll
[2015/12/02 15:59:42 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_3.dll
[2015/12/02 15:59:42 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_2.dll
[2015/12/02 15:59:42 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_1.dll
[2015/12/02 15:59:42 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_2.dll
[2015/12/02 15:59:42 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_1.dll
[2015/12/02 15:59:42 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_2.dll
[2015/12/02 15:59:42 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_1.dll
[2015/12/02 15:59:41 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_30.dll
[2015/12/02 15:59:41 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_29.dll
[2015/12/02 15:59:41 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_28.dll
[2015/12/02 15:59:41 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_30.dll
[2015/12/02 15:59:41 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_29.dll
[2015/12/02 15:59:41 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_28.dll
[2015/12/02 15:59:41 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_0.dll
[2015/12/02 15:59:41 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_0.dll
[2015/12/02 15:59:41 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_0.dll
[2015/12/02 15:59:41 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_0.dll
[2015/12/02 15:59:40 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_25.dll
[2015/12/02 15:59:40 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_27.dll
[2015/12/02 15:59:40 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_26.dll
[2015/12/02 15:59:40 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_24.dll
[2015/12/02 15:59:40 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_25.dll
[2015/12/02 15:59:40 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_27.dll
[2015/12/02 15:59:40 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_26.dll
[2015/12/02 15:59:40 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_24.dll
[2015/12/02 15:59:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2015/11/28 17:59:28 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\cacaoweb
[2015/11/27 20:20:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2015/11/25 15:13:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2015/11/22 16:52:49 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Trove
[2015/11/22 16:36:15 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2015/11/18 14:50:31 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64
[2015/11/18 14:50:29 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\Mediatronic
[2015/11/13 17:06:12 | 000,000,000 | ---D | C] -- C:\Users\julien\Desktop\mods
[2015/11/13 17:02:04 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\.atlauncher
[2015/11/12 11:47:06 | 000,045,680 | ---- | C] (LogMeIn Inc.) -- C:\WINDOWS\SysNative\drivers\Hamdrv.sys
[2015/11/11 18:31:07 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\Steam
[2015/11/11 18:31:07 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Local\CEF
[2015/11/11 18:24:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2015/11/11 18:24:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2015/11/11 18:21:31 | 021,873,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2015/11/11 18:21:28 | 018,803,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2015/11/11 18:21:28 | 002,049,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
[2015/11/11 18:21:28 | 000,541,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mcupdate_GenuineIntel.dll
[2015/11/11 18:21:27 | 002,675,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
[2015/11/11 18:21:27 | 001,083,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
[2015/11/11 18:21:27 | 000,502,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dlnashext.dll
[2015/11/11 18:21:27 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dlnashext.dll
[2015/11/11 18:21:27 | 000,025,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
[2015/11/11 18:21:26 | 003,248,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2015/11/11 18:21:26 | 002,418,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2015/11/11 18:21:25 | 008,020,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2015/11/11 18:21:25 | 001,392,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2015/11/11 18:21:25 | 000,459,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys
[2015/11/11 18:21:24 | 002,647,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2015/11/11 18:21:24 | 001,918,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2015/11/11 18:21:23 | 003,587,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2015/11/11 18:21:23 | 002,639,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\esent.dll
[2015/11/11 18:21:23 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\internetmail.dll
[2015/11/11 18:21:23 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dssvc.dll
[2015/11/11 18:21:22 | 002,987,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll
[2015/11/11 18:21:22 | 001,795,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2015/11/11 18:21:22 | 000,961,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2015/11/11 18:21:22 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usermgr.dll
[2015/11/11 18:21:21 | 001,015,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2015/11/11 18:21:21 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2015/11/11 18:21:20 | 002,180,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2015/11/11 18:21:20 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll
[2015/11/11 18:21:20 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Usb.dll
[2015/11/11 18:21:20 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Usb.dll
[2015/11/11 18:21:19 | 001,383,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2015/11/11 18:21:19 | 000,966,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2015/11/11 18:21:19 | 000,762,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2015/11/11 18:21:19 | 000,579,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2015/11/11 18:21:19 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll
[2015/11/11 18:21:18 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2015/11/11 18:21:18 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2015/11/11 18:21:17 | 000,650,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2015/11/11 18:21:17 | 000,607,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2015/11/11 18:21:17 | 000,539,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2015/11/11 17:29:10 | 000,000,000 | ---D | C] -- C:\Users\julien\AppData\Roaming\vlc
[2015/11/11 17:28:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/12/09 16:54:31 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/12/09 16:49:52 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\julien\Desktop\OTL.exe
[2015/12/09 16:48:00 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/12/09 16:43:59 | 001,720,310 | ---- | M] (Nephya ) -- C:\Users\julien\Desktop\Nephya (1).exe
[2015/12/09 16:37:59 | 000,819,778 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2015/12/09 16:37:59 | 000,154,144 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2015/12/09 16:37:58 | 001,839,260 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/12/09 16:37:58 | 000,731,134 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015/12/09 16:37:58 | 000,137,964 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015/12/09 16:36:12 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2015/12/09 16:33:18 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015/12/09 16:32:10 | 000,554,288 | ---- | M] () -- C:\Users\julien\Desktop\cacaoweb.exe
[2015/12/09 16:31:46 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015/12/09 16:31:41 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\PCJULIEN_julien_HistoryPrediction.bin
[2015/12/09 16:31:35 | 000,001,143 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
[2015/12/09 16:31:16 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys
[2015/12/09 16:31:15 | 3417,354,240 | -HS- | M] () -- C:\hiberfil.sys
[2015/12/09 16:05:32 | 000,000,008 | ---- | M] () -- C:\Users\julien\AppData\Roaming\DofusAppId0_2
[2015/12/09 16:02:52 | 000,000,125 | ---- | M] () -- C:\Users\julien\AppData\Roaming\D2Info0
[2015/12/09 16:02:38 | 000,025,193 | ---- | M] () -- C:\ProgramData\1449673355.bdinstall.bin
[2015/12/09 15:50:14 | 000,000,008 | ---- | M] () -- C:\Users\julien\AppData\Roaming\DofusAppId0_1
[2015/12/06 14:51:22 | 000,000,580 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2015/12/06 14:50:01 | 000,001,489 | ---- | M] () -- C:\Users\julien\Desktop\Server.lnk
[2015/12/05 15:41:11 | 000,000,864 | ---- | M] () -- C:\Users\julien\Desktop\CDBurnerXP.lnk
[2015/12/04 20:24:31 | 000,000,132 | ---- | M] () -- C:\Users\julien\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2015/12/04 14:27:39 | 000,000,633 | ---- | M] () -- C:\Users\julien\Desktop\teeworlds.exe.lnk
[2015/12/04 11:43:44 | 000,000,803 | ---- | M] () -- C:\Users\Public\Desktop\Firestorm Launcher.lnk
[2015/12/04 11:08:31 | 000,000,202 | ---- | M] () -- C:\Users\julien\Desktop\Unturned.url
[2015/12/04 11:05:23 | 000,000,561 | ---- | M] () -- C:\Users\julien\Desktop\Steam.lnk
[2015/12/03 18:41:23 | 000,000,202 | ---- | M] () -- C:\Users\julien\Desktop\Trove.url
[2015/12/03 18:26:40 | 000,000,660 | ---- | M] () -- C:\Users\Public\Desktop\Camtasia Studio 8.lnk
[2015/12/02 18:00:12 | 000,000,571 | ---- | M] () -- C:\Users\julien\Desktop\Fraps.lnk
[2015/11/29 18:39:21 | 000,001,882 | ---- | M] () -- C:\Users\julien\Desktop\Minecraft.lnk
[2015/11/28 16:40:11 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2015/11/27 17:20:24 | 000,087,920 | ---- | M] (BitDefender) -- C:\WINDOWS\SysNative\drivers\bdvedisk.sys
[2015/11/25 15:13:06 | 000,097,888 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysWow64\WindowsAccessBridge-32.dll
[2015/11/22 16:42:53 | 000,000,202 | ---- | M] () -- C:\Users\julien\Desktop\Block N Load.url
[2015/11/22 16:42:19 | 000,000,202 | ---- | M] () -- C:\Users\julien\Desktop\Ace of Spades.url
[2015/11/12 11:47:06 | 000,045,680 | ---- | M] (LogMeIn Inc.) -- C:\WINDOWS\SysNative\drivers\Hamdrv.sys

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/12/09 16:54:31 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015/12/09 16:36:12 | 000,001,002 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2015/12/09 16:31:41 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\PCJULIEN_julien_HistoryPrediction.bin
[2015/12/09 16:02:52 | 000,000,008 | ---- | C] () -- C:\Users\julien\AppData\Roaming\DofusAppId0_2
[2015/12/09 16:02:38 | 000,025,193 | ---- | C] () -- C:\ProgramData\1449673355.bdinstall.bin
[2015/12/09 15:47:34 | 000,000,125 | ---- | C] () -- C:\Users\julien\AppData\Roaming\D2Info0
[2015/12/09 15:47:34 | 000,000,008 | ---- | C] () -- C:\Users\julien\AppData\Roaming\DofusAppId0_1
[2015/12/06 14:51:22 | 000,000,580 | ---- | C] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2015/12/06 14:50:01 | 000,001,489 | ---- | C] () -- C:\Users\julien\Desktop\Server.lnk
[2015/12/05 15:41:11 | 000,000,864 | ---- | C] () -- C:\Users\julien\Desktop\CDBurnerXP.lnk
[2015/12/05 15:41:11 | 000,000,798 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
[2015/12/04 14:27:42 | 000,000,633 | ---- | C] () -- C:\Users\julien\Desktop\teeworlds.exe.lnk
[2015/12/04 11:43:44 | 000,000,803 | ---- | C] () -- C:\Users\Public\Desktop\Firestorm Launcher.lnk
[2015/12/04 11:08:31 | 000,000,202 | ---- | C] () -- C:\Users\julien\Desktop\Unturned.url
[2015/12/03 18:49:02 | 000,000,561 | ---- | C] () -- C:\Users\julien\Desktop\Steam.lnk
[2015/12/03 18:41:23 | 000,000,202 | ---- | C] () -- C:\Users\julien\Desktop\Trove.url
[2015/12/03 18:26:40 | 000,000,660 | ---- | C] () -- C:\Users\Public\Desktop\Camtasia Studio 8.lnk
[2015/12/02 18:00:12 | 000,000,571 | ---- | C] () -- C:\Users\julien\Desktop\Fraps.lnk
[2015/11/29 18:39:21 | 000,001,882 | ---- | C] () -- C:\Users\julien\Desktop\Minecraft.lnk
[2015/11/28 17:59:20 | 000,554,288 | ---- | C] () -- C:\Users\julien\Desktop\cacaoweb.exe
[2015/11/28 16:40:11 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2015/11/22 16:42:53 | 000,000,202 | ---- | C] () -- C:\Users\julien\Desktop\Block N Load.url
[2015/11/22 16:42:19 | 000,000,202 | ---- | C] () -- C:\Users\julien\Desktop\Ace of Spades.url
[2015/11/01 17:05:02 | 000,000,132 | ---- | C] () -- C:\Users\julien\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2015/10/25 11:44:27 | 001,766,952 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/10/18 13:28:14 | 000,024,813 | ---- | C] () -- C:\ProgramData\1445171292.bdinstall.bin
[2015/10/18 13:08:56 | 000,487,627 | ---- | C] () -- C:\ProgramData\1445169691.bdinstall.bin
[2015/09/10 06:11:03 | 001,823,232 | ---- | C] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/09/10 06:11:03 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/07/30 23:42:17 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/07/30 23:42:16 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/07/30 22:50:14 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2015/07/23 04:02:12 | 037,749,064 | ---- | C] () -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2015/07/10 06:13:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/07/10 04:48:21 | 000,270,848 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/07/10 04:43:42 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/07/10 04:38:35 | 000,028,672 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/07/10 04:37:56 | 000,081,408 | ---- | C] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015/07/10 04:37:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015/07/10 04:37:44 | 000,156,672 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015/07/10 04:30:30 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/07/10 04:27:10 | 000,161,632 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/07/10 04:26:53 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/07/10 04:26:00 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/07/10 04:24:36 | 000,022,016 | ---- | C] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015/07/10 04:24:34 | 000,053,760 | ---- | C] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015/07/10 03:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/07/10 02:57:08 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin

[color=#E56717]========== ZeroAccess Check ==========[/color]


[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2015/10/25 11:44:27 | 006,487,248 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2015/10/25 11:44:27 | 005,120,056 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015/07/10 04:18:20 | 000,995,328 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015/07/10 04:28:52 | 000,754,688 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015/07/10 04:17:59 | 000,516,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2015/10/18 13:08:57 | 000,000,000 | -HSD | M] -- C:\Users\julien\AppData\Roaming\.#
[2015/11/13 17:02:04 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\.atlauncher
[2015/12/06 16:45:58 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\.minecraft
[2015/12/09 15:47:34 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\app
[2015/10/18 13:13:11 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Bitdefender
[2015/12/09 16:53:33 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\cacaoweb
[2015/12/05 15:41:11 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Canneverbe Limited
[2015/12/04 11:00:31 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Desktop
[2015/12/04 10:21:39 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\DofusTesting-2
[2015/12/04 10:23:05 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Elyn
[2015/12/04 10:46:46 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Elyn v0.5
[2015/12/04 12:48:08 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\FileZilla
[2015/10/18 13:27:38 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\java
[2015/11/18 14:50:29 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Mediatronic
[2015/10/19 10:58:43 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Minecraft Skin Viewer
[2015/12/02 18:22:51 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Mirillis
[2015/12/09 15:50:30 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Nephya
[2015/12/09 15:47:34 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\NephyaDofus
[2015/12/09 16:02:52 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\NephyaDofus-2
[2015/10/19 11:29:14 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Publish Providers
[2015/10/18 13:01:31 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\QuickScan
[2015/10/19 10:04:52 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Rainmeter
[2015/12/04 10:23:05 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Reg
[2015/12/04 10:23:05 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2015/10/31 18:16:16 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Sony
[2015/12/03 18:08:41 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\TechSmith
[2015/12/04 14:39:30 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Teeworlds
[2015/11/22 16:53:01 | 000,000,000 | ---D | M] -- C:\Users\julien\AppData\Roaming\Trove

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2015/10/21 10:45:00 | 000,000,040 | -H-- | M] () -- C:\58FA678665A1
[2015/10/21 10:45:00 | 000,000,112 | -H-- | M] () -- C:\944B4A7F9360
[2015/12/09 16:30:40 | 000,010,023 | ---- | M] () -- C:\bdlog.txt
[2014/03/18 11:09:56 | 000,398,356 | RHS- | M] () -- C:\bootmgr
[2015/03/27 22:33:13 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2015/12/09 16:31:15 | 3417,354,240 | -HS- | M] () -- C:\hiberfil.sys
[2015/12/09 16:31:16 | 1342,177,280 | -HS- | M] () -- C:\pagefile.sys
[2015/12/09 16:54:31 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/12/09 16:31:16 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2015/07/30 23:39:18 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2015/12/09 16:35:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2015/12/09 16:35:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2015/10/18 13:40:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2015/09/10 06:26:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2015/11/25 15:13:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2015/07/30 23:42:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2015/12/05 18:06:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2015/10/25 11:51:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2015/12/03 18:26:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
[2015/12/05 18:06:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2015/10/18 14:13:49 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2015/10/19 11:27:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sony
[2015/09/10 06:08:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2015/10/25 11:51:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2015/09/10 06:08:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2015/07/30 23:42:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2015/07/30 23:42:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2015/09/10 06:08:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2015/07/30 23:42:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2015/07/30 23:42:06 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
[2015/07/30 23:42:06 | 000,000,000 | --SD | M] -- C:\Program Files (x86)\WindowsPowerShell

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2015/07/10 06:05:58 | 000,063,328 | ---- | M] (Microsoft Corporation) MD5=EF09D07626820F7F89519514C17FE768 -- C:\WINDOWS\SysNative\drivers\AGP440.sys
[2015/07/10 06:05:58 | 000,063,328 | ---- | M] (Microsoft Corporation) MD5=EF09D07626820F7F89519514C17FE768 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\machine.inf_amd64_c357541563097b98\AGP440.sys
[2015/07/10 06:05:58 | 000,063,328 | ---- | M] (Microsoft Corporation) MD5=EF09D07626820F7F89519514C17FE768 -- C:\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_10.0.10240.16384_none_c2135eea595e241e\AGP440.sys
[2015/10/30 08:09:09 | 000,063,328 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\AGP440.sys
[2015/10/30 08:09:09 | 000,063,328 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_d82530a843997b64\AGP440.sys
[2015/10/30 08:09:09 | 000,063,328 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_10.0.10586.0_none_4698859469080cab\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2015/07/30 23:31:02 | 000,079,788 | ---- | M] () MD5=60C3339644B24C3805B79D78872A8CF6 -- C:\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_10.0.10240.16384_none_942404652b17add8\appmgmts.dll
[2015/07/30 23:06:17 | 000,085,874 | ---- | M] () MD5=8A51C79161B9F1E1FD46928F703CE532 -- C:\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_10.0.10240.16384_none_89cf5a12f6b6ebdd\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2015/07/10 05:31:51 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=8921DF6060DB5C7700AA48CB12E9EA08 -- C:\WINDOWS\SysNative\drivers\atapi.sys
[2015/07/10 05:31:51 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=8921DF6060DB5C7700AA48CB12E9EA08 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_5689072091519d03\atapi.sys
[2015/07/10 05:31:51 | 000,028,512 | ---- | M] (Microsoft Corporation) MD5=8921DF6060DB5C7700AA48CB12E9EA08 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.10240.16384_none_e53899c8bc371940\atapi.sys
[2015/10/30 08:09:09 | 000,028,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\atapi.sys
[2015/10/30 08:09:09 | 000,028,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_1a5ded552bf60401\atapi.sys
[2015/10/30 08:09:09 | 000,028,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.10586.0_none_69bdc072cbe101cd\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2015/07/10 04:15:15 | 000,944,640 | ---- | M] (Microsoft Corporation) MD5=9A4DEDB0AFE7D254DA6F38F976ABB84E -- C:\WINDOWS\SysNative\autochk.exe
[2015/07/10 04:15:15 | 000,944,640 | ---- | M] (Microsoft Corporation) MD5=9A4DEDB0AFE7D254DA6F38F976ABB84E -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.10240.16384_none_e9f45ef85c6e6d93\autochk.exe
[2015/07/10 04:25:43 | 000,852,480 | ---- | M] (Microsoft Corporation) MD5=B407085E10413D1F023A8E666140C429 -- C:\Windows\SysWOW64\autochk.exe
[2015/07/10 04:25:43 | 000,852,480 | ---- | M] (Microsoft Corporation) MD5=B407085E10413D1F023A8E666140C429 -- C:\Windows\WinSxS\wow64_microsoft-windows-autochk_31bf3856ad364e35_10.0.10240.16384_none_f449094a90cf2f8e\autochk.exe
[2015/10/30 08:09:13 | 000,945,664 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\autochk.exe
[2015/10/30 08:09:13 | 000,945,664 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.10586.0_none_6e7985a26c185620\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2015/07/10 04:20:42 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=1E8A9267F8886803AAE02982FC1B5BC4 -- C:\WINDOWS\SysNative\drivers\beep.sys
[2015/07/10 04:20:42 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=1E8A9267F8886803AAE02982FC1B5BC4 -- C:\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_10.0.10240.16384_none_cc211301a24a92ff\beep.sys

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2015/09/10 07:16:18 | 000,271,867 | ---- | M] () MD5=1708C42BE5FE35E318861F737D76D93F -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16384_none_6409c31348ca7b5e\explorer.exe
[2015/11/28 17:21:25 | 000,199,778 | ---- | M] () MD5=3CA61C8322B96EA39751B2260BA58195 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16404_none_640b799d48c8c7ad\explorer.exe
[2015/11/25 06:12:23 | 004,047,288 | ---- | M] (Microsoft Corporation) MD5=4EEB94F7E1ABAB5503EEFEA7F2394370 -- C:\Windows\SoftwareDistribution\Download\78d8a3cb2e72d217f7f4a6ab2a8c40da\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16603_none_640d784b48c6fd34\explorer.exe
[2015/09/10 07:05:38 | 000,371,555 | ---- | M] () MD5=98ADE1F7784610D9C4348074BED44E35 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16384_none_59b518c11469b963\explorer.exe
[2015/11/28 17:15:26 | 000,337,549 | ---- | M] () MD5=A028A963712693E82C90707E7059FDB4 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16404_none_59b6cf4b146805b2\explorer.exe
[2015/09/10 06:11:10 | 004,048,808 | ---- | M] (Microsoft Corporation) MD5=B3F90790F991A5A21113B58EE50FA696 -- C:\Windows\SysWOW64\explorer.exe
[2015/09/10 06:11:10 | 004,048,808 | ---- | M] (Microsoft Corporation) MD5=B3F90790F991A5A21113B58EE50FA696 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16431_none_640b2f9348c91d1b\explorer.exe
[2015/11/25 06:42:36 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=D2EAEC106F183572317AF7D68E381063 -- C:\Windows\SoftwareDistribution\Download\78d8a3cb2e72d217f7f4a6ab2a8c40da\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16603_none_59b8cdf914663b39\explorer.exe
[2015/09/10 06:11:10 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=F1CBCB7FA6F3B309639AA2D4EF74469C -- C:\Windows\explorer.exe
[2015/09/10 06:11:10 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=F1CBCB7FA6F3B309639AA2D4EF74469C -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16431_none_59b6854114685b20\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2015/07/10 04:21:02 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=5576DF399CF2D3B63608F7F282151249 -- C:\WINDOWS\SysNative\hidserv.dll
[2015/07/10 04:21:02 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=5576DF399CF2D3B63608F7F282151249 -- C:\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.10240.16384_none_deacba1c221bf2db\hidserv.dll
[2015/07/10 04:31:58 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=79E59B65911FC6A155417C85639DB0BC -- C:\Windows\SysWOW64\hidserv.dll
[2015/07/10 04:31:58 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=79E59B65911FC6A155417C85639DB0BC -- C:\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.10240.16384_none_e901646e567cb4d6\hidserv.dll
[2015/10/30 08:09:10 | 000,036,864 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\hidserv.dll
[2015/10/30 08:09:10 | 000,036,864 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.10586.0_none_6331e0c631c5db68\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2015/07/10 06:06:06 | 000,412,000 | ---- | M] (Intel Corporation) MD5=4E69EE8F8E5DA036535D433C544AF9E2 -- C:\WINDOWS\SysNative\drivers\iaStorV.sys
[2015/07/10 06:06:06 | 000,412,000 | ---- | M] (Intel Corporation) MD5=4E69EE8F8E5DA036535D433C544AF9E2 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_5069105fb236ae4b\iaStorV.sys
[2015/07/10 06:06:06 | 000,412,000 | ---- | M] (Intel Corporation) MD5=4E69EE8F8E5DA036535D433C544AF9E2 -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_10.0.10240.16384_none_b711c42722754533\iaStorV.sys
[2015/10/30 08:09:08 | 000,412,000 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\iaStorV.sys
[2015/10/30 08:09:08 | 000,412,000 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_5069105fb236ae4b\iaStorV.sys
[2015/10/30 08:09:08 | 000,412,000 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_10.0.10586.0_none_3b96ead1321f2dc0\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2015/07/10 06:18:15 | 000,168,400 | ---- | M] (Microsoft Corporation) MD5=837F5F1B7C66CF4B5C8FDF6BE472E9BA -- C:\Windows\SysWOW64\imm32.dll
[2015/07/10 06:18:15 | 000,168,400 | ---- | M] (Microsoft Corporation) MD5=837F5F1B7C66CF4B5C8FDF6BE472E9BA -- C:\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_10.0.10240.16384_none_6eab3a17497909a1\imm32.dll
[2015/07/10 06:07:51 | 000,211,288 | ---- | M] (Microsoft Corporation) MD5=BFE876E837A15B740FCEA4F4A844C7C9 -- C:\WINDOWS\SysNative\imm32.dll
[2015/07/10 06:07:51 | 000,211,288 | ---- | M] (Microsoft Corporation) MD5=BFE876E837A15B740FCEA4F4A844C7C9 -- C:\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_10.0.10240.16384_none_64568fc5151847a6\imm32.dll
[2015/10/30 08:09:09 | 000,230,416 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\imm32.dll
[2015/10/30 08:09:09 | 000,230,416 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_10.0.10586.0_none_e8dbb66f24c23033\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2015/07/10 06:09:31 | 000,702,512 | ---- | M] (Microsoft Corporation) MD5=038B10C8E735FE667DA29B2E92A09B8A -- C:\WINDOWS\SysNative\kernel32.dll
[2015/07/10 06:09:31 | 000,702,512 | ---- | M] (Microsoft Corporation) MD5=038B10C8E735FE667DA29B2E92A09B8A -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.10240.16384_none_9bbe56eff0f8d352\kernel32.dll
[2015/07/10 06:15:54 | 000,624,312 | ---- | M] (Microsoft Corporation) MD5=6407D861DFB1D295336EFC8D12DE2E5F -- C:\Windows\SysWOW64\kernel32.dll
[2015/07/10 06:15:54 | 000,624,312 | ---- | M] (Microsoft Corporation) MD5=6407D861DFB1D295336EFC8D12DE2E5F -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.10240.16384_none_a61301422559954d\kernel32.dll
[2015/10/30 08:09:11 | 000,705,584 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\kernel32.dll
[2015/10/30 08:09:11 | 000,705,584 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.10586.0_none_20437d9a00a2bbdf\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2015/07/10 06:15:54 | 000,306,528 | ---- | M] (Microsoft Corporation) MD5=56D710DA9CCC7E5541DB958BC2A13EE2 -- C:\Windows\SysWOW64\mswsock.dll
[2015/07/10 06:15:54 | 000,306,528 | ---- | M] (Microsoft Corporation) MD5=56D710DA9CCC7E5541DB958BC2A13EE2 -- C:\Windows\WinSxS\wow64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.10240.16384_none_caa87306fc59cb2d\mswsock.dll
[2015/07/10 06:06:47 | 000,364,384 | ---- | M] (Microsoft Corporation) MD5=6E887DD203D23FD46D3460A3DB67E0D0 -- C:\WINDOWS\SysNative\mswsock.dll
[2015/07/10 06:06:47 | 000,364,384 | ---- | M] (Microsoft Corporation) MD5=6E887DD203D23FD46D3460A3DB67E0D0 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.10240.16384_none_c053c8b4c7f90932\mswsock.dll
[2015/10/30 08:09:11 | 000,357,216 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\mswsock.dll
[2015/10/30 08:09:11 | 000,357,216 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.10586.0_none_44d8ef5ed7a2f1bf\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2015/10/25 11:44:38 | 001,168,736 | ---- | M] (Microsoft Corporation) MD5=616F40B897DA651221F86A1741E9609B -- C:\WINDOWS\SysNative\drivers\ndis.sys
[2015/10/25 11:44:38 | 001,168,736 | ---- | M] (Microsoft Corporation) MD5=616F40B897DA651221F86A1741E9609B -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10240.16515_none_615891d5c2b6d2cf\ndis.sys
[2015/10/25 12:46:15 | 000,005,184 | ---- | M] () MD5=65BF421EF9F1D4DC74A63D59393D46ED -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10240.16394_none_6155d91bc2b97002\ndis.sys
[2015/09/10 07:09:08 | 000,008,152 | ---- | M] () MD5=AEFDE82F813162D48FB6319FC42D705B -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10240.16384_none_6155efe3c2b95661\ndis.sys
[2015/10/30 08:09:15 | 001,152,864 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\ndis.sys
[2015/10/30 08:09:15 | 001,152,864 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10586.0_none_e5db168dd2633eee\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2015/07/10 04:29:36 | 000,708,608 | ---- | M] (Microsoft Corporation) MD5=415414A10B77B9F56EB561C23806431D -- C:\Windows\SysWOW64\netlogon.dll
[2015/07/10 04:29:36 | 000,708,608 | ---- | M] (Microsoft Corporation) MD5=415414A10B77B9F56EB561C23806431D -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_100cd3440707f4f6\netlogon.dll
[2015/07/10 04:19:04 | 000,836,096 | ---- | M] (Microsoft Corporation) MD5=5E9439E5FA71649335D8FB0090843062 -- C:\WINDOWS\SysNative\netlogon.dll
[2015/07/10 04:19:04 | 000,836,096 | ---- | M] (Microsoft Corporation) MD5=5E9439E5FA71649335D8FB0090843062 -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_05b828f1d2a732fb\netlogon.dll
[2015/10/30 08:09:14 | 000,846,848 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\netlogon.dll
[2015/10/30 08:09:14 | 000,846,848 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10586.0_none_8a3d4f9be2511b88\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2015/09/10 06:11:14 | 002,116,448 | ---- | M] (Microsoft Corporation) MD5=466EC5659C02ED53DBD47DC1BC2B8086 -- C:\WINDOWS\SysNative\drivers\ntfs.sys
[2015/09/10 06:11:14 | 002,116,448 | ---- | M] (Microsoft Corporation) MD5=466EC5659C02ED53DBD47DC1BC2B8086 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10240.16412_none_ae733761b7974fd9\ntfs.sys
[2015/09/10 07:09:13 | 000,159,948 | ---- | M] () MD5=69DFF8D32F8DC3D9C5417818801B1E7A -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10240.16384_none_ae719b6bb798e437\ntfs.sys
[2015/12/01 08:01:29 | 002,115,936 | ---- | M] (Microsoft Corporation) MD5=BA8DC96D1DD7785EB0589CB1777208B7 -- C:\Windows\SoftwareDistribution\Download\78d8a3cb2e72d217f7f4a6ab2a8c40da\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10240.16601_none_ae754cd7b7956bbf\ntfs.sys
[2015/10/30 08:09:15 | 002,152,800 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\ntfs.sys
[2015/10/30 08:09:15 | 002,152,800 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10586.0_none_32f6c215c742ccc4\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2015/07/10 06:07:35 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=76F19EAE7A52CBAF7B8EC428BE6E0DA0 -- C:\WINDOWS\SysNative\drivers\nvstor.sys
[2015/07/10 06:07:35 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=76F19EAE7A52CBAF7B8EC428BE6E0DA0 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_3ee6d81b22b3ea66\nvstor.sys
[2015/07/10 06:07:35 | 000,166,240 | ---- | M] (NVIDIA Corporation) MD5=76F19EAE7A52CBAF7B8EC428BE6E0DA0 -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_10.0.10240.16384_none_41db34d659abef0b\nvstor.sys
[2015/10/30 08:09:09 | 000,166,240 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\nvstor.sys
[2015/10/30 08:09:09 | 000,166,240 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_3ee6d81b22b3ea66\nvstor.sys
[2015/10/30 08:09:09 | 000,166,240 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_10.0.10586.0_none_c6605b806955d798\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2015/07/10 04:29:11 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=2884FDC26067A7AF8CA34009DB315ECC -- C:\Windows\SysWOW64\proquota.exe
[2015/07/10 04:29:11 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=2884FDC26067A7AF8CA34009DB315ECC -- C:\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_10.0.10240.16384_none_d3a8ce0274b50157\proquota.exe
[2015/07/10 04:18:44 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=EA8E0AE71F8C0725A67CF0D87A7413A5 -- C:\WINDOWS\SysNative\proquota.exe
[2015/07/10 04:18:44 | 000,034,304 | ---- | M] (Microsoft Corporation) MD5=EA8E0AE71F8C0725A67CF0D87A7413A5 -- C:\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_10.0.10240.16384_none_2fc769862d12728d\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2015/07/10 04:17:56 | 001,168,896 | ---- | M] (Microsoft Corporation) MD5=BD60F5633F6BD617D9ECCA3FFDC0D37E -- C:\WINDOWS\SysNative\qmgr.dll
[2015/07/10 04:17:56 | 001,168,896 | ---- | M] (Microsoft Corporation) MD5=BD60F5633F6BD617D9ECCA3FFDC0D37E -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client-core_31bf3856ad364e35_10.0.10240.16384_none_2e454e862584285c\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2015/07/10 04:18:47 | 000,284,672 | ---- | M] (Microsoft Corporation) MD5=7DD59DB925AC2401D33B38152551153E -- C:\WINDOWS\SysNative\scecli.dll
[2015/07/10 04:18:47 | 000,284,672 | ---- | M] (Microsoft Corporation) MD5=7DD59DB925AC2401D33B38152551153E -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.10240.16384_none_400e540a73c8b9b6\scecli.dll
[2015/07/10 04:29:16 | 000,227,840 | ---- | M] (Microsoft Corporation) MD5=E45A0DCC29B8097D7D51CAEE389F4665 -- C:\Windows\SysWOW64\scecli.dll
[2015/07/10 04:29:16 | 000,227,840 | ---- | M] (Microsoft Corporation) MD5=E45A0DCC29B8097D7D51CAEE389F4665 -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.10240.16384_none_4a62fe5ca8297bb1\scecli.dll
[2015/10/30 08:09:14 | 000,251,392 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\scecli.dll
[2015/10/30 08:09:14 | 000,251,392 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.10586.0_none_c4937ab48372a243\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2015/07/10 04:19:54 | 000,781,824 | ---- | M] (Microsoft Corporation) MD5=58C17D92AD61EC7A98B05F4FAD0D205A -- C:\WINDOWS\SysNative\spoolsv.exe
[2015/07/10 04:19:54 | 000,781,824 | ---- | M] (Microsoft Corporation) MD5=58C17D92AD61EC7A98B05F4FAD0D205A -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.10240.16384_none_de4c14d05c360fba\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2015/07/10 05:40:18 | 000,039,856 | ---- | M] (Microsoft Corporation) MD5=A1AEAFC58DF7803B8AA2B09EA93C722F -- C:\WINDOWS\SysNative\svchost.exe
[2015/07/10 05:40:18 | 000,039,856 | ---- | M] (Microsoft Corporation) MD5=A1AEAFC58DF7803B8AA2B09EA93C722F -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.10240.16384_none_bdbbcb4f9ffb0889\svchost.exe
[2015/07/10 05:42:05 | 000,035,176 | ---- | M] (Microsoft Corporation) MD5=A412DEDAC6A1FF7BA06FEB3B6725495E -- C:\Windows\SysWOW64\svchost.exe
[2015/07/10 05:42:05 | 000,035,176 | ---- | M] (Microsoft Corporation) MD5=A412DEDAC6A1FF7BA06FEB3B6725495E -- C:\Windows\WinSxS\wow64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.10240.16384_none_c81075a1d45bca84\svchost.exe
[2015/10/30 08:09:14 | 000,043,944 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\svchost.exe
[2015/10/30 08:09:14 | 000,043,944 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.10586.0_none_4240f1f9afa4f116\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2015/07/10 04:57:23 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0608264209A836821D6AB8C67B108AB -- C:\WINDOWS\SysNative\termsrv.dll
[2015/07/10 04:57:23 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0608264209A836821D6AB8C67B108AB -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.10240.16384_none_969fb376eef16206\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2015/07/10 04:18:32 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=5F6D4F12EA33BFC0F0F8CEEAC332AB2B -- C:\WINDOWS\SysNative\userinit.exe
[2015/07/10 04:18:32 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=5F6D4F12EA33BFC0F0F8CEEAC332AB2B -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_e4292bc46c5d42af\userinit.exe
[2015/07/10 04:29:03 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A89C18F5E6D8981D5E937B325290915A -- C:\Windows\SysWOW64\userinit.exe
[2015/07/10 04:29:03 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A89C18F5E6D8981D5E937B325290915A -- C:\Windows\WinSxS\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_ee7dd616a0be04aa\userinit.exe
[2015/10/30 08:09:14 | 000,030,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\userinit.exe
[2015/10/30 08:09:14 | 000,030,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10586.0_none_68ae526e7c072b3c\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2015/07/10 05:39:58 | 000,378,720 | ---- | M] (Microsoft Corporation) MD5=823A237D871CD652C6BFD47BECB6810A -- C:\WINDOWS\SysNative\drivers\volsnap.sys
[2015/07/10 05:39:58 | 000,378,720 | ---- | M] (Microsoft Corporation) MD5=823A237D871CD652C6BFD47BECB6810A -- C:\WINDOWS\SysNative\DriverStore\FileRepository\volume.inf_amd64_b017de7f410d7e0a\volsnap.sys
[2015/07/10 05:39:58 | 000,378,720 | ---- | M] (Microsoft Corporation) MD5=823A237D871CD652C6BFD47BECB6810A -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_10.0.10240.16384_none_1db7292f96c24571\volsnap.sys
[2015/10/30 08:09:08 | 000,414,560 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\volsnap.sys
[2015/10/30 08:09:08 | 000,414,560 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_910e4cc912bf5a43\volsnap.sys
[2015/10/30 08:09:08 | 000,414,560 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_10.0.10586.0_none_a23c4fd9a66c2dfe\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2015/10/25 12:44:19 | 000,281,161 | ---- | M] () MD5=30D47183C13E12AB00814738CE2E8AD4 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16391_none_4da15ca565f5169f\wininet.dll
[2015/10/25 11:44:27 | 002,207,232 | ---- | M] (Microsoft Corporation) MD5=73FC0143E518D8DB7AFE9675F4AF8063 -- C:\Windows\SysWOW64\wininet.dll
[2015/10/25 11:44:27 | 002,207,232 | ---- | M] (Microsoft Corporation) MD5=73FC0143E518D8DB7AFE9675F4AF8063 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16515_none_f1857f8dad94ffab\wininet.dll
[2015/09/10 07:23:54 | 000,162,249 | ---- | M] () MD5=9E92841833D4D31C01BA13126C56ED3B -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16384_none_f182dd9bad97833d\wininet.dll
[2015/09/10 07:06:29 | 000,179,962 | ---- | M] () MD5=A952E4D0D60AC1A2259AF0E36E8E2AD2 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16384_none_4da1791f65f4f473\wininet.dll
[2015/10/25 12:56:11 | 000,232,112 | ---- | M] () MD5=DA7EF6415C461D71199123F60D473324 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16391_none_f182c121ad97a569\wininet.dll
[2015/10/25 11:44:27 | 002,740,224 | ---- | M] (Microsoft Corporation) MD5=E5D86250453B33900666D92ED1A92ABE -- C:\WINDOWS\SysNative\wininet.dll
[2015/10/25 11:44:27 | 002,740,224 | ---- | M] (Microsoft Corporation) MD5=E5D86250453B33900666D92ED1A92ABE -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16515_none_4da41b1165f270e1\wininet.dll
[2015/10/30 08:09:14 | 002,647,552 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\wininet.dll
[2015/10/30 08:09:14 | 002,647,552 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10586.0_none_c26006aeb70422ee\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2015/09/10 06:11:03 | 000,290,312 | ---- | M] (Microsoft Corporation) MD5=7718A2A9B2BFB2C8E2BAEB03310CA3FD -- C:\WINDOWS\SysNative\wininit.exe
[2015/09/10 06:11:03 | 000,290,312 | ---- | M] (Microsoft Corporation) MD5=7718A2A9B2BFB2C8E2BAEB03310CA3FD -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.10240.16393_none_38f311cf9efe0dc0\wininit.exe
[2015/09/10 07:12:39 | 000,007,089 | ---- | M] () MD5=B8B827E0CF2D703744040643B71F94C6 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.10240.16384_none_38f32a7d9efdf146\wininit.exe
[2015/10/30 08:09:14 | 000,290,856 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\wininit.exe
[2015/10/30 08:09:14 | 000,290,856 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.10586.0_none_bd785127aea7d9d3\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2015/11/28 17:18:50 | 000,058,762 | ---- | M] () MD5=0334604D9147339D9FD54A9390F18DAF -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16542_none_77c5caad6f9c9875\winlogon.exe
[2015/11/28 17:18:50 | 000,058,762 | ---- | M] () MD5=0334604D9147339D9FD54A9390F18DAF -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16542_none_77c5caad6f9c9875\winlogon.exe
[2015/10/25 12:48:35 | 000,032,733 | ---- | M] () MD5=6E5C53209156E1CDB8A4C14A4401EA11 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16485_none_77c474f56f9ddd17\winlogon.exe
[2015/10/25 12:48:35 | 000,032,733 | ---- | M] () MD5=6E5C53209156E1CDB8A4C14A4401EA11 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16485_none_77c474f56f9ddd17\winlogon.exe
[2015/09/10 07:12:39 | 000,067,130 | ---- | M] () MD5=8020A193D06ADC02048CAC55A1753B08 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe
[2015/09/10 07:12:39 | 000,067,130 | ---- | M] () MD5=8020A193D06ADC02048CAC55A1753B08 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe
[2015/11/05 05:01:41 | 000,579,072 | ---- | M] (Microsoft Corporation) MD5=A7C48B051A9C5D5054916DE5BEBBCA2D -- C:\WINDOWS\SysNative\winlogon.exe
[2015/11/05 05:01:41 | 000,579,072 | ---- | M] (Microsoft Corporation) MD5=A7C48B051A9C5D5054916DE5BEBBCA2D -- C:\WINDOWS\SysNative\winlogon.exe
[2015/11/05 05:01:41 | 000,579,072 | ---- | M] (Microsoft Corporation) MD5=A7C48B051A9C5D5054916DE5BEBBCA2D -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16590_none_77c554f96f9d1e4c\winlogon.exe
[2015/11/05 05:01:41 | 000,579,072 | ---- | M] (Microsoft Corporation) MD5=A7C48B051A9C5D5054916DE5BEBBCA2D -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16590_none_77c554f96f9d1e4c\winlogon.exe
[2015/11/28 17:18:50 | 000,000,275 | ---- | M] () MD5=AA7C692D4A7BA7CC83F22F9366E00A73 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16566_none_77c5a4b56f9cc053\winlogon.exe
[2015/11/28 17:18:50 | 000,000,275 | ---- | M] () MD5=AA7C692D4A7BA7CC83F22F9366E00A73 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16566_none_77c5a4b56f9cc053\winlogon.exe
[2015/10/30 08:09:14 | 000,584,704 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\winlogon.exe
[2015/10/30 08:09:14 | 000,584,704 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\winlogon.exe
[2015/10/30 08:09:14 | 000,584,704 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10586.0_none_fc48996f7f48af26\winlogon.exe
[2015/10/30 08:09:14 | 000,584,704 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10586.0_none_fc48996f7f48af26\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2015/07/10 06:11:29 | 000,422,560 | ---- | M] (Microsoft Corporation) MD5=0E49B1E08DF8484884A0092C48B933DB -- C:\WINDOWS\SysNative\ws2_32.dll
[2015/07/10 06:11:29 | 000,422,560 | ---- | M] (Microsoft Corporation) MD5=0E49B1E08DF8484884A0092C48B933DB -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.10240.16384_none_fab8227169035068\ws2_32.dll
[2015/07/10 06:17:54 | 000,372,912 | ---- | M] (Microsoft Corporation) MD5=C8F00509B3880DDEDC7944472AC9D5B8 -- C:\Windows\SysWOW64\ws2_32.dll
[2015/07/10 06:17:54 | 000,372,912 | ---- | M] (Microsoft Corporation) MD5=C8F00509B3880DDEDC7944472AC9D5B8 -- C:\Windows\WinSxS\wow64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.10240.16384_none_050cccc39d641263\ws2_32.dll
[2015/10/30 08:09:15 | 000,430,816 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\ws2_32.dll
[2015/10/30 08:09:15 | 000,430,816 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.10586.0_none_7f3d491b78ad38f5\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2015/10/18 16:12:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I02K8DX
[2015/10/20 11:03:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I08YMTX.jar
[2015/11/11 17:28:42 | 000,000,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I0W8MJY.lnk
[2015/10/20 11:13:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I12WMBN.cfg
[2015/11/01 17:11:54 | 000,000,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I1E3PE4.png
[2015/10/18 16:12:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I280C92
[2015/10/30 20:40:20 | 000,000,180 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I30T0CR.sfk
[2015/10/30 20:35:12 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I38IQQU.avi
[2015/12/03 18:03:16 | 000,000,102 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I3NUYI7.exe
[2015/11/18 15:28:51 | 000,000,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I4AGPHR
[2015/10/29 13:48:03 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I50TQP1.jar
[2015/10/29 13:54:20 | 000,000,208 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I5Z74NJ.jar
[2015/11/25 17:05:36 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I61LSOQ.jar
[2015/10/28 13:42:19 | 000,000,158 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I703WJ1.sfk
[2015/11/01 17:11:54 | 000,000,108 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I7IVBHV.png
[2015/10/19 10:14:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I7VV5YI.exe
[2015/10/30 20:35:12 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I7X3PTP.avi
[2015/11/22 16:43:04 | 000,000,138 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I8A0FLQ.zip
[2015/10/29 13:54:54 | 000,000,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I97Q7SS.jar
[2015/10/18 16:12:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$I9IQ5ZT
[2015/10/20 11:09:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IA62K03.jar
[2015/10/28 13:42:13 | 000,000,180 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IB7ME24.sfk
[2015/10/30 20:36:55 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IBKNQZO.avi
[2015/11/27 19:03:05 | 000,000,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IBZX2YW.zip
[2015/11/25 17:08:21 | 000,000,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$ICF8ZNB.zip
[2015/10/19 17:25:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$ICYQA92.zip
[2015/11/27 17:05:04 | 000,000,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$ID2BMTV.exe
[2015/10/20 09:58:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IDAXAXL.rar
[2015/12/04 10:53:56 | 000,000,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IDPQ3KY
[2015/10/31 17:52:38 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IEJDCAX.sfk
[2015/11/01 15:23:27 | 000,000,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IFQN4MH.jpg
[2015/11/22 16:43:04 | 000,000,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IHCKANI.zip
[2015/10/27 14:31:19 | 000,000,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IHM5KCV.exe
[2015/10/18 16:12:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IIDI5P7
[2015/10/29 13:49:12 | 000,000,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IJLC2Y5.jar
[2015/11/01 17:11:52 | 000,000,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IK92XGO.png
[2015/10/30 20:39:24 | 000,000,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IL8MX0J.sfk
[2015/10/27 14:30:57 | 000,000,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$ILBJ1V4.exe
[2015/10/31 17:40:07 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$ILJ1S7P.avi
[2015/10/30 11:33:42 | 000,000,190 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IPFAFOL.jar
[2015/10/29 14:52:52 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IPHWUF4.jar
[2015/10/30 20:39:24 | 000,000,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IPOXL2A.sfap0
[2015/11/01 17:11:00 | 000,000,110 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$ISXDTMY.psd
[2015/10/30 20:40:18 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IVAB09C.avi
[2015/10/29 13:48:15 | 000,000,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IW2W1MP.jar
[2015/10/29 14:58:25 | 000,000,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IWK7409.jar
[2015/12/09 15:47:32 | 000,000,098 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IZ02URA.exe
[2015/10/29 14:59:42 | 000,000,190 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IZ92C5V.jar
[2015/11/01 17:11:51 | 000,000,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\$IZGG3HO.jpg
[2015/10/17 11:37:23 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2515474790-4026213131-545787870-1001\desktop.ini
[2015/07/30 22:52:07 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2015/10/18 13:38:48 | 000,001,090 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2015/10/18 13:38:48 | 000,001,094 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2015/12/09 16:36:12 | 000,001,002 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 220 bytes -> C:\Users\julien\OneDrive:ms-properties

< End of report >

Publicité


Signaler le contenu de ce document

Publicité